Posts Tagged ‘ HAProxy

Certificate order in Haproxy PEM file

For SSL in Haproxy you need to create PEM-file and put cert plus private key. But in right order

-----BEGIN MY CERTIFICATE-----
-----END MY CERTIFICATE-----
-----BEGIN INTERMEDIATE CERTIFICATE-----
-----END INTERMEDIATE CERTIFICATE-----
-----BEGIN INTERMEDIATE CERTIFICATE-----
-----END INTERMEDIATE CERTIFICATE-----
-----BEGIN ROOT CERTIFICATE-----
-----END ROOT CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----

Maximum Haproxy performance by OpenSSL version

Оставлю эту картинку тут

haproxy SSL

haproxy SSL


Источник
И небольшая презентация http://www.whd.global/downloads/2014/sStag1d1.pdf

HAProxy с поддержкой SSL

Поддержка SSL появилась в HAProxy 1.5
Эта версия для Ubuntu/Debian доступна с такого репозитория

sudo apt-add-repository ppa:vbernat/haproxy-1.5
 
sudo apt-get update
 
sudo apt-get install haproxy